Container Service Platform Upgrade FAQ

When will the new AWS environment (containers.aws.web.umich.edu) be available?

The new environment is available now. Charges will begin to accrue on May 1, 2023 per Container Service published rates.

I’ve heard of ROSA. What is that?

ROSA is an acronym that stands for Redhat OpenShift Service on AWS. It is the product being used for the new environment. We’ve also heard the new environment referred to as OpenShift 4. That is the version of OpenShift being used.

What types of sensitive data can be hosted in the new environment?

Restricted data types and data types with specific regulatory/compliance requirements such as HIPAA/PHI, CUI and ITAR are NOT permitted for this service. All other High, and all Moderate and Low sensitivity levels are permitted.

I’m trying to access the new environment and getting an error message saying “This site can’t be reached”. Why is this?

In order to improve the security in our new environment, access to the web console and CLI is limited to on-campus networks and the U-M VPN (All Traffic). Note: hosted applications are still available to the public internet by default.

When will the existing AWS environment (containers.it.umich.edu) be shut down?

The existing AWS environment will be shut down August 24, 2023.

Can I move my application to the new AWS environment now?

You can begin to move your applications to the new environment now. It will become a production environment with appropriate on-call, monitoring and adherence to ITS stated maintenance windows on Monday, May 1.

How do I request a project in the new AWS environment?

Starting May 1, you will be able to automatically provision projects via the SRS. Before then, send an email to [email protected] with details about your project request.

Do I need to migrate anything?

Yes, any applications that are running in the existing environment will need to be migrated to the new one before the August 24 shut down date. Applications that do not use persistent volumes (PVs) can migrate without staff assistance. Container Service staff are available to assist with the migration of PV data. Depending on the usage of the application, an outage may be required to migrate PV data.

My application uses an RDS database maintained by the MiDatabase team. Will this be available from the new AWS environment?

Yes, the new AWS environment runs on the same networks as the existing one. As such, all external services such as RDS instances or on-campus resources such as MiDatabase instances or the Data Warehouse will be available without modification of firewall rules.

My application pulls data from either a MiDatabase instance or the Data Warehouse. Will these be available in the new AWS environment?

Yes, the new AWS environment runs on the same networks as the existing one. As such, all external services such as RDS instances or on-campus resources such as MiDatabase instances or the Data Warehouse will be available without modification of firewall rules.

Will the published Container Service rates change for using the new AWS environment?

No, the published rates will remain the same. Charges will start to accrue in the new environment starting on May 1, 2023.